Russian-linked influence networks repackaged France's unrest
A new EU-backed analysis says coordinated accounts exploited real October protests to portray France as collapsing, without evidence that foreign actors caused the unrest.

A Russian-linked influence operation used France's October protests as raw material for a coordinated online campaign, according to an analysis reported by Reuters on 9 November. The activity sought to portray the French state as weak, authoritarian and close to collapse. The finding concerns the manipulation of coverage after unrest began, not proof that foreign actors organised or intensified the street protests themselves.
The European Union analysis reviewed activity from 7 to 21 October and linked it to Operation Overload, a network also known as Matryoshka that has targeted journalists, public institutions and support for Ukraine since 2023. Reuters said the operation distributed fake videos, cloned voices, forged headlines and manipulated images across several platforms. The news agency could not independently verify every internal assessment in the report.
Real grievances became campaign material
A separate Alliance4Europe study examined the six weeks before 17 October and identified 639 coordinated messages that it attributed with high confidence to the Russia-linked Doppelganger network. The organisation estimated roughly 7.4 million views. Those figures describe potential exposure to posts, not the number of people persuaded by them, and should not be treated as a measure of political impact.
The campaign was effective at borrowing authentic grievances. Instead of inventing an event from nothing, the accounts selected dramatic images and commentary from real demonstrations, removed context and repackaged them for foreign audiences. That distinction makes verification harder because an authentic photograph can still support a false narrative when its date, location or meaning is changed.
A familiar amplification method
France's VIGINUM service documented the wider Matryoshka method in 2024. It traced content to Russian-language Telegram channels before copies were directed at media outlets and fact-checkers, apparently to consume their time and create the appearance of independent confirmation. VIGINUM classified the campaign as foreign digital interference, but its earlier technical report does not establish who controlled every account in the new October dataset.
The latest analysis therefore adds evidence about amplification, not causation. It does not show that France's domestic anger was fabricated, and there is no verified basis for saying that the network triggered violence. It does show how a foreign operation can attach itself to a genuine crisis quickly enough to complicate public understanding while facts are still emerging.
Evidence of exploitation, not causation
For readers, the practical warning is to separate the existence of a protest from claims about its scale, cause and consequences. Images should be checked against their original publication, and screenshots of headlines should be treated as claims until the underlying article is found. The most defensible conclusion today is narrow: coordinated Russian-linked accounts exploited France's unrest, while the effect on public opinion remains unmeasured.
Sources & context
Reporting and reference material used for this article. Context sources do not independently confirm every news claim.
- Reuters ↗Independent reporting, published 9 November 2026: findings from the EU analysis, Operation Overload techniques, scope limits and Reuters' verification caveat.
- Alliance4Europe ↗Independent research report: six-week dataset, attribution confidence, coordinated-message count and estimated exposure.
- VIGINUM ↗Primary French technical context, published June 2024: documented Matryoshka distribution pattern and foreign-interference assessment.
Written for WHIF from the linked material. This article does not claim on-the-ground reporting. Our editorial standards.